https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T20:05:03.672502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15853 EUVD-2026-15853 2026-10-14T20:05:03.675856+00:00 EUVD-2026-15853 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28704 fkie_cve-2022-28704 2026-10-14T20:05:03.675886+00:00

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connected to the Internet with the authentication information unchanged from the default settings.

 https://cve.radiocsirt.org/vuln/ghsa-373m-8w83-9jwp GHSA-373m-8w83-9jwp 2026-10-14T20:05:03.675916+00:00

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default settings in which is set to accept SSH connections from the WAN side, and is also connected to the Internet with the authentication information unchanged from the default settings.

 https://cve.radiocsirt.org/vuln/gsd-2022-28704 gsd-2022-28704 2026-10-14T20:05:03.675934+00:00 gsd-2022-28704 https://cve.radiocsirt.org/vuln/jvndb-2022-000036 jvndb-2022-000036 2026-10-14T20:05:03.675946+00:00

Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. * Use of Hard-coded Credentials (CWE-798) - CVE-2022-29525 * Improper Access Control (CWE-284) - CVE-2022-28704 * Improper Access Control (CWE-284) - CVE-2022-26834 CVE-2022-29525 Narumi Hirai of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-28704 Hiroki Oshiro and Tagawa, Masaki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2022-26834 Tagawa, Masaki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.